Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/323630323a666364333a3231303a3a2f34342d3434203d3e2031323339.roa
File:                     323630323a666364333a3231303a3a2f34342d3434203d3e2031323339.roa (raw, json)
Hash identifier:          cHsDgkqtJCTn584zQpWzUHOBwYgywkns10tzDpZ3sCs=
Subject key identifier:   4F:71:18:E0:A3:1F:75:A0:02:A8:5B:24:8C:55:68:D0:2A:C6:7B:98
Certificate issuer:       /CN=7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5
Certificate serial:       27D90F7FF06677B1E33E66BEC5BC98DF9E048FE7
Authority key identifier: 7E:9B:D7:63:D6:18:92:4E:EF:29:38:C2:83:CC:13:5E:90:08:38:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/323630323a666364333a3231303a3a2f34342d3434203d3e2031323339.roa
Signing time:             Fri 09 Dec 2022 16:08:08 +0000
ROA not before:           Fri 09 Dec 2022 16:03:08 +0000
ROA not after:            Fri 08 Dec 2023 16:08:08 +0000
asID:                     1239
IP address blocks:        2602:fcd3:210::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:d9:0f:7f:f0:66:77:b1:e3:3e:66:be:c5:bc:98:df:9e:04:8f:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5
        Validity
            Not Before: Dec  9 16:03:08 2022 GMT
            Not After : Dec  8 16:08:08 2023 GMT
        Subject: CN=4F7118E0A31F75A002A85B248C5568D02AC67B98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:8a:67:df:d1:17:0d:ea:e6:c5:2b:ea:1d:9f:
                    80:24:f3:53:66:5c:b6:9a:09:9d:69:ca:5a:e5:85:
                    0c:31:91:3f:95:90:af:71:e4:aa:b9:a5:3b:d7:65:
                    8c:51:c0:28:87:93:43:c7:ca:59:03:ad:01:13:32:
                    a7:6a:fe:41:bd:45:af:03:cc:f3:45:7f:c3:36:86:
                    1c:6f:32:bb:d1:8b:93:12:b8:c7:c7:20:ce:65:48:
                    e6:b1:2e:a3:8b:f1:86:51:dd:04:16:e3:a8:b2:6f:
                    3b:f8:cc:37:f5:e3:ba:66:7c:be:bc:a3:e9:4c:3d:
                    ac:10:90:6f:67:c1:94:5f:98:a5:e9:4f:7d:79:82:
                    f7:ce:d4:8a:8f:58:c6:57:f8:fb:79:47:36:16:47:
                    90:10:c3:78:6d:f7:e9:d1:ce:75:57:f7:c4:b8:8f:
                    a2:0f:8a:0b:80:d7:fc:e9:b7:51:83:52:ed:49:13:
                    9e:d9:0b:23:e5:12:c1:38:1e:23:91:96:9e:ac:e3:
                    95:16:e0:7f:39:c4:c3:ff:b6:7e:46:e4:30:77:29:
                    18:f0:b9:c1:a3:29:ed:00:31:f1:46:7f:3b:9b:78:
                    8b:67:ee:a0:e3:04:3f:2d:20:91:e8:ac:b8:b1:dc:
                    e6:e6:c0:fc:79:07:17:fb:67:da:59:12:8a:37:a2:
                    ae:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:71:18:E0:A3:1F:75:A0:02:A8:5B:24:8C:55:68:D0:2A:C6:7B:98
            X509v3 Authority Key Identifier:
                keyid:7E:9B:D7:63:D6:18:92:4E:EF:29:38:C2:83:CC:13:5E:90:08:38:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/7E9BD763D618924EEF2938C283CC135E90083853.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/323630323a666364333a3231303a3a2f34342d3434203d3e2031323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fcd3:210::/44

    Signature Algorithm: sha256WithRSAEncryption
         ba:b4:ef:7b:2e:41:ed:3b:eb:b5:95:af:43:04:04:d0:92:f5:
         c8:a7:51:25:bd:84:d9:67:fb:30:66:fb:86:8b:20:8e:73:b5:
         82:15:37:9c:d0:28:1f:e5:af:b5:9b:14:3d:9f:67:3a:c1:1c:
         21:93:1d:e2:4a:d7:28:4a:2e:64:e1:e4:9a:a5:d1:53:3f:06:
         88:f7:d0:e2:ef:54:d3:04:d4:c5:e5:f8:7f:fc:ab:bf:fc:e7:
         bc:8e:ac:b0:34:67:00:32:b7:f0:13:83:48:23:08:27:43:ed:
         2a:f6:be:64:1f:f0:62:07:66:7b:8f:67:5b:3a:a1:2f:94:1f:
         64:d3:70:c8:53:12:78:06:64:12:11:40:b7:b6:80:62:0f:f4:
         6c:ce:d9:99:76:c1:d0:47:e2:ac:30:f1:a7:86:24:82:52:a0:
         40:2d:e5:6b:58:2a:b1:9b:4b:ef:fd:3f:eb:cc:21:2d:a2:70:
         f6:d6:eb:99:97:0c:dd:06:ce:1e:6b:59:98:46:32:4c:b8:ce:
         ad:31:67:03:96:61:2d:ce:4d:ab:80:5c:ec:d1:30:99:40:07:
         a6:3d:27:d6:ca:a9:b1:fc:98:cc:0b:fa:bd:af:9e:6f:d2:26:
         22:67:c4:42:73:ca:4e:a2:b6:51:6e:33:19:4a:ea:be:7b:a6:
         b6:49:ec:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----